Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
File: LdWWwep-y7G-F3f8DTjtBspA6r4.mft (raw, json)
Hash identifier: PleD5Y9HD4zLabzM1OcQs8DCO0hHDkK8AY07ZsBMAvE=
Subject key identifier: 03:BF:08:1C:F5:CC:23:D9:14:A3:52:3F:58:9B:FF:3B:B0:4B:DA:A5
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 0196876E5CB186F5FC024C3C0E19C440A65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
Manifest number: 0ED6
Signing time: Wed 30 Apr 2025 16:01:18 +0000
Manifest this update: Wed 30 Apr 2025 16:01:18 +0000
Manifest next update: Thu 01 May 2025 16:01:18 +0000
Files and hashes: 1: LdWWwep-y7G-F3f8DTjtBspA6r4.crl (hash: wSW+Xu2BsnIrBjyoQdIOA+mlYFwMvohWsV5caT64sxc=)
2: OMnZiNHbw7E-f80Ik0oReEwyFs8.roa (hash: J4ZRlc9ZTuyWB+1e21hJBQgTzJ68vGeASJd7wVF5XJs=)
3: lPP1CTZE_I869rs5FvdeSS4FA3k.roa (hash: qLXwzivmvmSSh7sbcIlPZozy/8eLL4zZEt9Q9nGGudc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6e:5c:b1:86:f5:fc:02:4c:3c:0e:19:c4:40:a6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Apr 30 16:01:18 2025 GMT
Not After : May 1 16:01:18 2025 GMT
Subject: CN=03bf081cf5cc23d914a3523f589bff3bb04bdaa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:1d:a8:d9:eb:f2:25:70:70:36:08:c5:64:
82:aa:28:2b:02:93:4e:0d:29:43:3c:c6:40:e6:38:
47:91:15:3b:8a:9c:04:45:62:fd:28:e0:e7:75:4d:
81:e5:a0:6c:e1:8d:09:af:75:18:1e:e7:db:16:e6:
85:cd:d1:8e:7d:6d:7c:3e:6d:e7:5e:68:a8:0e:17:
ec:8d:c2:42:0c:c4:4b:23:71:7c:81:ea:14:19:ed:
d8:23:d6:e1:3a:ac:85:02:e6:2a:50:95:96:39:1e:
4f:ef:5a:27:f9:6b:f8:cd:5f:38:24:67:0a:5e:04:
15:12:58:27:fc:bc:fc:c7:03:a0:2f:a1:bf:4e:07:
62:ca:11:b7:75:91:81:c9:e7:cf:cd:21:ba:49:06:
37:dd:c7:78:09:a1:6b:1a:7f:e2:7a:53:ae:f5:8f:
85:51:4c:80:01:be:72:4c:59:fb:22:92:ea:24:ce:
81:5c:3f:ee:b3:b7:4b:06:59:49:e4:f8:77:c5:b6:
1a:b7:36:aa:fc:a9:ab:07:dc:2b:7a:f5:ac:f1:e9:
fc:72:b9:ba:86:5a:a8:d6:0a:d6:e2:b2:91:7d:99:
73:3d:26:4d:4b:30:b2:ae:c0:49:9e:ae:2d:fa:40:
8d:18:3e:ea:9b:a8:9e:83:ea:49:17:a1:d8:a4:f9:
f3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BF:08:1C:F5:CC:23:D9:14:A3:52:3F:58:9B:FF:3B:B0:4B:DA:A5
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e4:68:3c:c5:7d:32:79:3a:65:2b:7e:71:f8:fd:58:82:9b:
87:2a:ca:b1:22:f8:aa:d5:45:40:8c:0f:2d:03:3d:a6:5b:72:
84:1a:00:61:32:b5:a1:c5:3c:68:4d:ee:29:95:cc:5f:88:5e:
1c:97:4c:3a:02:ab:1d:14:8f:f7:82:f1:86:c4:b3:a4:5c:31:
e6:95:ad:c3:ad:01:43:aa:af:6d:f6:df:87:b6:59:d1:97:ea:
53:ee:a8:6f:71:9f:41:74:5d:64:7f:27:8e:82:66:16:5a:b6:
a7:0f:e5:68:f2:e5:8a:29:65:e6:1b:0e:e7:0e:d5:a2:a7:f3:
9d:f4:9c:bf:37:e5:4a:f2:09:6a:28:96:c5:58:f6:df:18:e6:
74:70:8e:c0:48:ee:06:8f:d1:b5:48:ca:8f:8c:47:2a:90:01:
a7:24:2c:f2:b4:3c:73:a3:d9:13:0f:6e:2c:4f:32:3d:93:3a:
df:45:98:df:00:25:dc:3e:bc:68:fc:cb:4b:b9:57:ff:3c:02:
91:d2:9e:39:9b:68:36:a7:15:9d:8b:70:97:13:8c:e0:9d:60:
36:fc:95:47:87:1c:66:ec:1d:a2:bd:61:ce:41:98:c8:c0:9a:
73:b0:cd:36:58:1b:b6:d9:ba:ec:23:24:5c:31:23:26:06:ec:
4a:8b:88:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHblyxhvX8Akw8DhnEQKZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZDU5NmMxZWE3ZWNiYjFiZTE3NzdmYzBkMzhlZDA2Y2E0
MGVhYmUwHhcNMjUwNDMwMTYwMTE4WhcNMjUwNTAxMTYwMTE4WjAzMTEwLwYDVQQD
EygwM2JmMDgxY2Y1Y2MyM2Q5MTRhMzUyM2Y1ODliZmYzYmIwNGJkYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXAdqNnr8iVwcDYIxWSCqigrApNO
DSlDPMZA5jhHkRU7ipwERWL9KODndU2B5aBs4Y0Jr3UYHufbFuaFzdGOfW18Pm3n
XmioDhfsjcJCDMRLI3F8geoUGe3YI9bhOqyFAuYqUJWWOR5P71on+Wv4zV84JGcK
XgQVElgn/Lz8xwOgL6G/TgdiyhG3dZGByefPzSG6SQY33cd4CaFrGn/ielOu9Y+F
UUyAAb5yTFn7IpLqJM6BXD/us7dLBllJ5Ph3xbYatzaq/KmrB9wrevWs8en8crm6
hlqo1grW4rKRfZlzPSZNSzCyrsBJnq4t+kCNGD7qm6ieg+pJF6HYpPnzAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAO/CBz1zCPZFKNSP1ib/zuwS9qlMB8GA1UdIwQY
MBaAFC3VlsHqfsuxvhd3/A047QbKQOq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGRXV3dlcC15N0ctRjNmOERUanRCc3BBNnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zNjNlY2MtMmFhMS00MjgxLTk1YjEt
OGIwZmMwNzg1OGQ2LzEvTGRXV3dlcC15N0ctRjNmOERUanRCc3BBNnI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zNjNlY2MtMmFhMS00MjgxLTk1YjEtOGIwZmMwNzg1OGQ2
LzEvTGRXV3dlcC15N0ctRjNmOERUanRCc3BBNnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsuRoPMV9
Mnk6ZSt+cfj9WIKbhyrKsSL4qtVFQIwPLQM9pltyhBoAYTK1ocU8aE3uKZXMX4he
HJdMOgKrHRSP94LxhsSzpFwx5pWtw60BQ6qvbfbfh7ZZ0ZfqU+6ob3GfQXRdZH8n
joJmFlq2pw/laPLliill5hsO5w7VoqfznfScvzflSvIJaiiWxVj23xjmdHCOwEju
Bo/RtUjKj4xHKpABpyQs8rQ8c6PZEw9uLE8yPZM630WY3wAl3D68aPzLS7lX/zwC
kdKeOZtoNqcVnYtwlxOM4J1gNvyVR4ccZuwdor1hzkGYyMCac7DNNlgbttm67CMk
XDEjJgbsSouIRA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:02:54 2025 by rpki-client